Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d101b158-926d-351a-91cc-d235adcacef5.roa
File:                     d101b158-926d-351a-91cc-d235adcacef5.roa (raw, json)
Hash identifier:          LwVbZjJcvfth6V15NgjAvhkL5MQD5/0FhZrAp87MWXg=
Subject key identifier:   5E:C7:CD:67:0A:C6:4A:0A:92:5C:A8:F0:3C:7A:58:D9:6B:9B:FF:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DEB9A850AF90F116478C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d101b158-926d-351a-91cc-d235adcacef5.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.23.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:eb:9a:85:0a:f9:0f:11:64:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=909f7ccf-69f5-4121-ac24-96b19b2907dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:bb:fe:ef:c8:b3:f2:59:8c:70:7f:97:95:
                    bd:ae:de:0c:27:16:4b:12:9e:9e:84:1a:16:1e:12:
                    f6:3b:91:4a:49:09:1f:f4:a8:60:f7:a8:c3:48:6b:
                    5a:e7:81:b7:7c:ae:f2:05:98:04:16:36:58:96:e1:
                    b5:74:ca:85:94:63:e8:93:a0:26:41:d6:e7:e4:cd:
                    e8:0f:8d:a4:df:73:ed:45:59:7b:3d:47:56:c5:0f:
                    33:ef:51:9e:10:fb:f9:99:8b:09:4e:72:b7:42:cb:
                    74:65:e2:ea:2b:45:7b:38:44:f2:fb:ea:4b:2e:9c:
                    d9:a5:3e:b3:d0:99:4d:08:bf:b1:4a:04:66:e1:c3:
                    38:7b:83:58:0a:15:49:d0:54:1e:8b:cb:bb:ab:db:
                    14:78:e9:b5:00:02:a0:1c:0f:b9:16:bb:00:57:9e:
                    ec:7c:27:31:93:f6:2e:cb:ad:35:1b:25:3f:22:81:
                    a7:f3:d6:ae:31:93:e8:f7:fb:56:ca:d0:75:1c:a2:
                    9e:de:95:26:24:43:b4:61:64:38:4a:32:fd:f9:68:
                    12:bc:b8:99:08:91:ac:c0:83:59:2f:d8:5c:a4:4a:
                    07:c9:80:fc:94:16:6b:e1:81:8a:9f:1d:71:5a:67:
                    1f:ce:f4:3b:bc:f7:52:7f:cc:07:22:24:af:23:5a:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C7:CD:67:0A:C6:4A:0A:92:5C:A8:F0:3C:7A:58:D9:6B:9B:FF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d101b158-926d-351a-91cc-d235adcacef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:27:47:a0:90:5d:52:3d:6f:50:f7:d5:fb:34:b9:a8:1f:
         53:fb:f0:46:53:68:f0:d8:b9:81:38:56:97:38:d8:d2:07:83:
         be:f6:09:aa:64:0d:e8:41:4c:c8:a6:fc:51:cd:71:d7:a4:3b:
         26:a8:70:1e:24:3c:41:3f:58:70:8c:41:da:32:d7:f3:4d:00:
         93:ae:e7:f2:8f:0f:9e:c8:21:64:b0:88:e5:74:b5:4c:15:a0:
         e3:10:0a:0a:22:17:18:1b:fc:dc:4e:47:bb:cf:d4:65:ad:f2:
         2f:4a:d1:5e:48:41:58:c9:9d:ba:03:c7:68:76:9d:84:c9:2a:
         2a:9e:f1:a0:64:5f:74:a0:84:11:f0:f4:84:33:9b:c4:4c:a6:
         5b:96:9f:68:c5:fb:61:dd:16:fc:4d:07:ca:3d:c2:4d:30:8e:
         97:ff:c6:c2:42:d5:aa:23:19:8d:8b:52:0a:73:06:54:94:72:
         51:55:ff:b7:a6:be:34:13:8b:6d:5b:91:c4:89:23:3d:2e:dc:
         53:ce:f6:b5:1e:a8:27:a1:f3:79:8d:22:0b:29:34:51:b6:5b:
         86:b8:44:7f:8c:6b:ee:a2:7d:d0:3e:78:23:83:af:a6:25:89:
         05:55:00:19:88:40:75:45:0e:ee:b8:82:bf:40:f8:c4:12:c0:
         d4:2f:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:44:09 2026 by rpki-client